Dell Z9000, Configuration Manual

Page: 722 / 968

•
mode
: enter a keyword for the modes (
exec
,
configure
,
interface
,
line
,
route-map
, or
router
)
•
level level
: the range is from 0 to 15. Levels 0, 1, and 15 are pre-configured. Levels 2 to 14 are
available for custom configuration.
•
command
: an Dell Networking OS CLI keyword (up to five keywords allowed).
•
reset
: return the command to its default privilege mode.
Examples of Privilege Level Commands
To view the configuration, use the
show running-config
command in EXEC Privilege mode.
The following example shows a configuration to allow a user john to view only EXEC mode commands
and all
snmp-server
commands. Because the
snmp-server
commands are enable level commands
and, by default, found in CONFIGURATION mode, also assign the launch command for CONFIGURATION
mode,
configure
, to the same privilege level as the
snmp-server
commands.
Line 1: The user john is assigned privilege level 8 and assigned a password.
Line 2: All other users are assigned a password to access privilege level 8.
Line 3: The
configure
command is assigned to privilege level 8 because it needs to reach
CONFIGURATION mode where the
snmp-server
commands are located.
Line 4: The
snmp-server
commands, in CONFIGURATION mode, are assigned to privilege level 8.
Dell(conf)# username john privilege 8 password john
Dell(conf)# enable password level 8 notjohn
Dell(conf)# privilege exec level 8 configure
Dell(conf)# privilege config level 8 snmp-server
Dell(conf)#end
Dell#show running-config
Current Configuration ...
!
hostname Force10
!
enable password level 8 notjohn
enable password Force10
!
username admin password 0 admin
username john password 0 john privilege 8
!
The following example shows the Telnet session for user john . The
show privilege
command output
confirms that john is in privilege level 8. In EXEC Privilege mode, john can access only the commands
listed. In CONFIGURATION mode, john can access only the
snmp-server
commands.
apollo% telnet 172.31.1.53
Trying 172.31.1.53...
Connected to 172.31.1.53.
Escape character is '^]'.
Login: john
Password:
Dell#show priv
Current privilege level is 8
Dell#?
configure Configuring from terminal
disable Turn off privileged commands
enable Turn on privileged commands
exit Exit from the EXEC
no Negate a command
722
Security